192229 - Do not allow extremal colspan/rowspan values.

Status: VERIFIED DUPLICATE of bug 141818

(SeaMonkey :: General, defect)

Description

[Marek Stępień [:marcoos, inactive]]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3b) Gecko/20030129
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3b) Gecko/20030129

There is an easy way to crash Mozilla and Phoenix with pure HTML. If the colspan
and/or rowspan values of a table are extremal (e.g. 99999999999999) Mozilla and
Phoenix crash (and probably other Gecko based browsers, too).

Reproducible: Always

Steps to Reproduce:
1.Open a page with an extremal colspan

Actual Results:  
Mozilla takes all of processors time and memory. System becomes unusable. If you
have luck, you can killall -9 mozilla-bin, otherwise only reboot helps.

Expected Results:  
Maybe a dialog box should appear with the message "This website contains
extremal (and probably wrong) values of colspan. Entering this page may make
your system unstable. Do you really want to enter it?"

A test case follows.

Comment 1

[Marek Stępień [:marcoos, inactive]]

Attachment: Test case for this bug.

Be careful and don't open this attachment, while doing something important.

Comment 2

[Jo Hermans]

Colspan is supposed to be maxium 1000 (see bug 7604). Rowspan is bug 141818.

*** This bug has been marked as a duplicate of 141818 ***